Database Encryption And Ciphertext Query Based On ESAE

With the development of the Internet technology, database systems are widely applied to all walks of life. Especially in the emerging market of cloud storage, data is delivered to an incredible third-party. Database security suffers a great threat, and there is no way to deal with this security challenges only by the safety mechanism of database management system (DBMS). Hence, database encryption is the most effective means to solve this problem. Database encryption can improve database security mechanism and effectively protect the confidentiality of sensitive information by the application of cryptography theory.The thesis has an in-depth analysis on current security threats and the development of database system security technology. The thesis improves the ESAE (Integrity Efficiently-Searchable the Authenticated Encryption) model and proposes a database encryption scheme IESAE (Integrity Efficiently Searchable the Authenticated Encryption) to support ciphertext integrity verification. The IESAE scheme can effectively solve the problem of key generation, encrypt sensitive data and verify the integrity of the ciphertext. The IESAE scheme uses an effective and easy way to manage keys, and can balance characteristics with efficiency of encryption. On the basis of the IEASE, the thesis proposes the ciphertext query scheme. For numeric data, the thesis comes up with the ciphertext query scheme based on B+tree index which encrypts leaf nodes.The thesis designs and implements a database encryption prototype system based on database encryption and ciphertext query. The system provides a sound data encryption mechanism in cloud storage to build a secure channel between user applications and database systems. Test on the system shows that it can effectively protect confidential information and provide users with safe and effective database services.